General

  • Target

    6e2f5ba736db2b0cb615a71e213ec07aa4f23a743d1a20fb2bd7b58beb5e0dc9N.exe

  • Size

    65KB

  • Sample

    241118-1g3taavrgx

  • MD5

    3cb84107011df42405c88b75a846fd60

  • SHA1

    d301bc95adbf12cff6eb751ce470db39308b2006

  • SHA256

    6e2f5ba736db2b0cb615a71e213ec07aa4f23a743d1a20fb2bd7b58beb5e0dc9

  • SHA512

    f792af316768d8f597ab068d008e575278ec0e93185aa9a7d7e843002ee27604b8d9a84f3bcc2469f8b15a70e35a00cde038f13f60d64b69bdc870586fb41106

  • SSDEEP

    768:S5qn4NX7+MbT1y9EG+HOkHmopjtWO3ZCdZP1f8SvnHH5GCQGPL4vzZq2o9W7Gsxl:8qn40x9kOkNpjWZP1Vn5GxGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      6e2f5ba736db2b0cb615a71e213ec07aa4f23a743d1a20fb2bd7b58beb5e0dc9N.exe

    • Size

      65KB

    • MD5

      3cb84107011df42405c88b75a846fd60

    • SHA1

      d301bc95adbf12cff6eb751ce470db39308b2006

    • SHA256

      6e2f5ba736db2b0cb615a71e213ec07aa4f23a743d1a20fb2bd7b58beb5e0dc9

    • SHA512

      f792af316768d8f597ab068d008e575278ec0e93185aa9a7d7e843002ee27604b8d9a84f3bcc2469f8b15a70e35a00cde038f13f60d64b69bdc870586fb41106

    • SSDEEP

      768:S5qn4NX7+MbT1y9EG+HOkHmopjtWO3ZCdZP1f8SvnHH5GCQGPL4vzZq2o9W7Gsxl:8qn40x9kOkNpjWZP1Vn5GxGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks